Month Of Abysssec Undisclosed Bugs – Cpanel suffers from a PHP restriction bypass vulnerability. Versions 11.25 and below are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/93406/moaub01-cpanel.pdf
Source: https://packetstormsecurity.com/files/93406/Month-Of-Abysssec-Undisclosed-Bugs-cPanel-Advisory.html